Chapter 8: Determining and Establishing InfoSec Functions

Work is necessary for man. Man invented the alarm clock.—Pablo Picasso^[1]

Chapter Objective

We began this section of the book with an overview of the duties and responsibilities of the IWC ISSO, then discussed establishing a CIAPP and the related InfoSec organization. We will continue the trend to narrow the focus: This chapter describes a process to determine what InfoSec functions are needed to successfully establish a CIAPP and related organization, as well as how to incorporate those functions into the InfoSec organization's day-to-day level-of-effort work.

^[1]Attributed to Pablo Picasso (1881–1973), Spanish painter and sculptor. Microsoft's Encarta Dictionary.